View GitHub Repository silverstripe-activedirectory

Schedule Inspection
Subscribe

Code Duplication    Length = 3-3 lines in 2 locations

src/Control/SAMLController.php 2 locations

@@ 157-159 (lines=3) @@
154 
    protected function getRedirect()
155 
    {
156 
        // Absolute redirection URLs may cause spoofing
157 
        if (Session::get('BackURL') && Director::is_site_url(Session::get('BackURL'))) {
158 
            return $this->redirect(Session::get('BackURL'));
159 
        }
160 

                                

                                                            

                                    161
                                    
                                    
        // Spoofing attack, redirect to homepage instead of spoofing url

                                

                                                            

                                    162
                                    
                                    
        if (Session::get('BackURL') && !Director::is_site_url(Session::get('BackURL'))) {

                                

                                                                                

                                
                                
                                    @@ 162-164 (lines=3) @@
                                
                            


                                                            

                                    159
                                    
                                    
        }

                                

                                                            

                                    160
                                    
                                    

                                

                                                            

                                    161
                                    
                                    
        // Spoofing attack, redirect to homepage instead of spoofing url

                                

                                                            

                                    162
                                    
                                    
        if (Session::get('BackURL') && !Director::is_site_url(Session::get('BackURL'))) {

                                

                                                            

                                    163
                                    
                                    
            return $this->redirect(Director::absoluteBaseURL());

                                

                                                            

                                    164
                                    
                                    
        }

                                

                                                            

                                    165
                                    
                                    

                                

                                                            

                                    166
                                    
                                    
        // If a default login dest has been set, redirect to that.

                                

                                                            

                                    167
                                    
                                    
        if (Security::config()->default_login_dest) {